Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: FErMGNUmxlOscan1GfD6AcaI6asd0lwP+g8B1CEEMRk=
Subject key identifier: 7E:C8:41:A9:A8:A8:C8:2A:6E:88:D3:BC:D2:2F:EE:13:6C:81:16:D2
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01A13ECBB075FCA6AA8492B448F3AD8686E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 09:01:38 +0000
Manifest this update: Thu 15 Oct 2026 09:01:38 +0000
Manifest next update: Fri 16 Oct 2026 09:01:38 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: dh7zlGBLPyaXTDZC2MHo73G8AicP9bPRhMzBAlDXgeI=)
2: srQhx9sIjZNbQnm0t4UEW3deG1s.roa (hash: cNnh8705CpKhEx6h/I59Oq+zBrL9F/BeoLhEWIh1/Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:b0:75:fc:a6:aa:84:92:b4:48:f3:ad:86:86:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Oct 15 09:01:38 2026 GMT
Not After : Oct 16 09:01:38 2026 GMT
Subject: CN=7ec841a9a8a8c82a6e88d3bcd22fee136c8116d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:71:c6:e6:1f:73:89:c8:a2:8f:86:5a:bd:
cd:7f:a6:22:02:ad:49:9b:04:d7:a7:b8:fe:f6:dc:
4c:29:c3:08:6b:a1:34:ee:9e:e5:28:ca:e2:eb:3c:
c6:7a:a6:39:9a:89:3a:b7:d1:8a:07:b6:17:c0:26:
02:7c:f6:c5:75:7b:65:8c:48:a5:75:56:7d:f7:c3:
bf:5b:11:22:d7:5e:1c:74:96:16:31:e5:70:0f:d2:
f9:e3:3b:53:75:d5:8c:61:0a:c0:39:88:4d:4b:d6:
21:a1:ec:c3:57:1d:ea:3b:2e:e6:5b:4f:e3:63:a9:
cf:b8:fb:3c:2f:34:1f:51:bf:70:44:19:05:da:68:
48:a7:70:67:91:fb:b4:81:23:2d:54:e2:3e:7b:e8:
a5:ba:03:77:c3:5a:ab:38:c0:99:09:95:6d:96:a9:
ad:08:32:08:ba:69:ac:df:59:61:e2:82:3b:06:4a:
27:eb:f3:4c:fa:a6:81:ea:4b:ab:aa:52:b0:da:61:
64:16:3c:b7:71:43:6c:b6:e8:44:8d:09:d7:c9:96:
5e:b4:25:c1:54:50:f1:3f:39:ad:ce:8a:d0:e1:0f:
91:33:fa:c2:99:0b:a6:47:aa:01:e3:dd:65:cf:58:
66:b1:0f:5b:96:b8:b7:44:f6:89:13:dd:59:c1:ba:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:41:A9:A8:A8:C8:2A:6E:88:D3:BC:D2:2F:EE:13:6C:81:16:D2
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:c6:67:e9:4e:f9:c0:ab:07:84:1b:48:ee:b3:9f:91:20:
ad:e5:91:e7:8e:e3:c3:92:a7:d1:53:80:53:60:6f:a5:9e:49:
05:db:04:e2:08:93:d8:2b:f7:ca:c3:6e:df:2d:80:5c:d4:37:
0a:61:19:2e:79:55:e8:e8:7a:a4:c3:67:43:b0:31:ab:2d:84:
c4:83:3e:3b:3f:97:43:ce:f9:91:1b:d1:55:e6:e5:d4:83:36:
14:6c:28:d7:6c:12:38:8a:88:55:16:cf:78:48:3e:95:20:88:
e8:55:f1:27:32:e6:5d:e5:ed:89:fe:e2:a6:d5:08:4d:fe:e5:
a0:b3:0a:66:6f:8c:4f:34:a8:18:cf:61:ca:85:9b:c6:ae:5a:
ca:53:a0:2b:fe:b0:0d:b3:ea:99:bc:7e:1d:df:c9:4f:ee:66:
67:2b:85:b8:13:5c:ad:71:17:30:1a:f4:90:44:76:0d:b3:10:
37:4f:3a:44:e6:e6:c2:3c:f7:f1:c3:cf:75:51:8b:29:ae:21:
85:76:d9:db:b8:5b:28:48:c6:a9:a7:09:69:cc:1f:87:e0:8b:
b2:00:8a:af:36:c1:08:27:39:36:36:75:4d:88:56:fd:93:8a:
96:09:e0:83:19:49:ee:0d:62:8b:33:f7:71:4f:a1:9f:4e:a0:
59:0f:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:56 2026 by rpki-client